diff --git a/foss.mk b/foss.mk
index 61737f9..89879a4 100644
--- a/foss.mk
+++ b/foss.mk
@@ -3,3 +3,5 @@
 PRODUCT_PACKAGES += \
 	FDroidPrivilegedExtension \
 	Provision
+
+-include vendor/foss/permissions/permissions.mk
diff --git a/permissions/foss-permissions.xml b/permissions/foss-permissions.xml
new file mode 100644
index 0000000..45fb5b4
--- /dev/null
+++ b/permissions/foss-permissions.xml
@@ -0,0 +1,279 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2014-2021 BlissRoms Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+
+<permissions>
+
+	<privapp-permissions package="is.xyz.mpv">
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="is.xyz.mpv">
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="co.pxhouse.sas">
+    </privapp-permissions>
+
+	<privapp-permissions package="com.android.vending">
+		<permission name="android.permission.FAKE_PACKAGE_SIGNATURE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.aurora.adroid">
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+		<permission name="android.permission.CAMERA"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.REQUEST_INSTALL_PACKAGES"/>
+		<permission name="android.permission.REQUEST_DELETE_PACKAGES"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+		<permission name="android.permission.MANAGE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.INSTALL_PACKAGES"/>
+		<permission name="android.permission.QUERY_ALL_PACKAGES"/>
+		<permission name="android.permission.ACCESS_WIFI_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.aurora.store">
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.CHANGE_NETWORK_STATE"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+		<permission name="android.permission.MANAGE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.QUERY_ALL_PACKAGES"/>
+		<permission name="android.permission.INSTALL_PACKAGES"/>
+		<permission name="android.permission.DELETE_PACKAGES"/>
+		<permission name="android.permission.REQUEST_INSTALL_PACKAGES"/>
+		<permission name="android.permission.REQUEST_DELETE_PACKAGES"/>
+		<permission name="android.permission.ACCESS_WIFI_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.aurora.store">
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.CHANGE_NETWORK_STATE"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+		<permission name="android.permission.MANAGE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.QUERY_ALL_PACKAGES"/>
+		<permission name="android.permission.INSTALL_PACKAGES"/>
+		<permission name="android.permission.DELETE_PACKAGES"/>
+		<permission name="android.permission.REQUEST_INSTALL_PACKAGES"/>
+		<permission name="android.permission.REQUEST_DELETE_PACKAGES"/>
+		<permission name="android.permission.ACCESS_WIFI_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.etesync.syncadapter">
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.ACCESS_WIFI_STATE"/>
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.READ_SYNC_SETTINGS"/>
+		<permission name="android.permission.READ_SYNC_STATS"/>
+		<permission name="android.permission.WRITE_SYNC_SETTINGS"/>
+		<permission name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"/>
+		<permission name="android.permission.AUTHENTICATE_ACCOUNTS"/>
+		<permission name="android.permission.GET_ACCOUNTS"/>
+		<permission name="android.permission.MANAGE_ACCOUNTS"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_CONTACTS"/>
+		<permission name="android.permission.WRITE_CONTACTS"/>
+		<permission name="android.permission.READ_CALENDAR"/>
+		<permission name="android.permission.WRITE_CALENDAR"/>
+		<permission name="org.dmfs.permission.READ_TASKS"/>
+		<permission name="org.dmfs.permission.WRITE_TASKS"/>
+		<permission name="org.tasks.permission.READ_TASKS"/>
+		<permission name="org.tasks.permission.WRITE_TASKS"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.google.android.gms">
+		<permission name="android.permission.FAKE_PACKAGE_SIGNATURE"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.ACCESS_COARSE_LOCATION"/>
+		<permission name="android.permission.ACCESS_FINE_LOCATION"/>
+		<permission name="android.permission.ACCESS_BACKGROUND_LOCATION"/>
+		<permission name="android.permission.READ_PHONE_STATE"/>
+		<permission name="android.permission.AUTHENTICATE_ACCOUNTS"/>
+		<permission name="android.permission.GET_ACCOUNTS"/>
+		<permission name="android.permission.MANAGE_ACCOUNTS"/>
+		<permission name="android.permission.USE_CREDENTIALS"/>
+		<permission name="android.permission.WAKE_LOCK"/>
+		<permission name="android.permission.READ_SYNC_SETTINGS"/>
+		<permission name="android.permission.WRITE_SYNC_SETTINGS"/>
+		<permission name="android.permission.READ_SYNC_STATS"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="com.google.android.c2dm.permission.RECEIVE"/>
+		<permission name="com.google.android.c2dm.permission.SEND"/>
+		<permission name="com.google.android.gtalkservice.permission.GTALK_SERVICE"/>
+		<permission name="org.microg.gms.STATUS_BROADCAST"/>
+		<permission name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"/>
+		<permission name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+		<permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+		<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+		<permission name="android.permission.RECEIVE_SMS"/>
+		<permission name="android.permission.SYSTEM_ALERT_WINDOW"/>
+		<permission name="android.permission.BLUETOOTH"/>
+		<permission name="android.permission.BLUETOOTH_ADMIN"/>
+		<permission name="org.microg.nlp.SERVICE_ADMIN"/>
+		<permission name="com.google.android.gms.nearby.exposurenotification.EXPOSURE_CALLBACK"/>
+		<permission name="android.permission.INSTALL_LOCATION_PROVIDER"/>
+		<permission name="android.permission.ACCESS_COARSE_UPDATES"/>
+		<permission name="android.permission.ACCESS_WIFI_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.google.android.gms">
+		<permission name="android.permission.FAKE_PACKAGE_SIGNATURE"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.ACCESS_COARSE_LOCATION"/>
+		<permission name="android.permission.ACCESS_FINE_LOCATION"/>
+		<permission name="android.permission.ACCESS_BACKGROUND_LOCATION"/>
+		<permission name="android.permission.READ_PHONE_STATE"/>
+		<permission name="android.permission.AUTHENTICATE_ACCOUNTS"/>
+		<permission name="android.permission.GET_ACCOUNTS"/>
+		<permission name="android.permission.MANAGE_ACCOUNTS"/>
+		<permission name="android.permission.USE_CREDENTIALS"/>
+		<permission name="android.permission.WAKE_LOCK"/>
+		<permission name="android.permission.READ_SYNC_SETTINGS"/>
+		<permission name="android.permission.WRITE_SYNC_SETTINGS"/>
+		<permission name="android.permission.READ_SYNC_STATS"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="com.google.android.c2dm.permission.RECEIVE"/>
+		<permission name="com.google.android.c2dm.permission.SEND"/>
+		<permission name="com.google.android.gtalkservice.permission.GTALK_SERVICE"/>
+		<permission name="org.microg.gms.STATUS_BROADCAST"/>
+		<permission name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"/>
+		<permission name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+		<permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+		<permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+		<permission name="android.permission.RECEIVE_SMS"/>
+		<permission name="android.permission.SYSTEM_ALERT_WINDOW"/>
+		<permission name="android.permission.BLUETOOTH"/>
+		<permission name="android.permission.BLUETOOTH_ADMIN"/>
+		<permission name="org.microg.nlp.SERVICE_ADMIN"/>
+		<permission name="com.google.android.gms.nearby.exposurenotification.EXPOSURE_CALLBACK"/>
+		<permission name="android.permission.INSTALL_LOCATION_PROVIDER"/>
+		<permission name="android.permission.ACCESS_COARSE_UPDATES"/>
+		<permission name="android.permission.ACCESS_WIFI_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.google.android.gsf">
+		<permission name="com.google.android.c2dm.permission.RECEIVE"/>
+		<permission name="com.google.android.c2dm.permission.SEND"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.simplemobiletools.gallery.pro">
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.SET_WALLPAPER"/>
+		<permission name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+		<permission name="android.permission.USE_FINGERPRINT"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="com.simplemobiletools.gallery.pro">
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.SET_WALLPAPER"/>
+		<permission name="android.permission.RECEIVE_BOOT_COMPLETED"/>
+		<permission name="android.permission.USE_FINGERPRINT"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="org.fdroid.fdroid.privileged">
+		<permission name="android.permission.INSTALL_PACKAGES"/>
+		<permission name="android.permission.DELETE_PACKAGES"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="org.microg.gms.droidguard">
+		<permission name="android.permission.INTERNET"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="org.microg.nlp.backend.ichnaea">
+		<permission name="android.permission.ACCESS_WIFI_STATE"/>
+		<permission name="android.permission.CHANGE_WIFI_STATE"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.ACCESS_COARSE_LOCATION"/>
+		<permission name="android.permission.ACCESS_FINE_LOCATION"/>
+		<permission name="android.permission.READ_PHONE_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="org.microg.nlp.backend.nominatim">
+		<permission name="android.permission.INTERNET"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="org.midorinext.android">
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.ACCESS_FINE_LOCATION"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="com.android.launcher.permission.INSTALL_SHORTCUT"/>
+		<permission name="android.permission.RECORD_AUDIO"/>
+		<permission name="android.permission.CAMERA"/>
+		<permission name="android.permission.READ_LOGS"/>
+		<permission name="android.permission.MODIFY_AUDIO_SETTINGS"/>
+		<permission name="android.permission.READ_PHONE_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="org.midorinext.android">
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.READ_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.ACCESS_FINE_LOCATION"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="com.android.launcher.permission.INSTALL_SHORTCUT"/>
+		<permission name="android.permission.RECORD_AUDIO"/>
+		<permission name="android.permission.CAMERA"/>
+		<permission name="android.permission.READ_LOGS"/>
+		<permission name="android.permission.MODIFY_AUDIO_SETTINGS"/>
+		<permission name="android.permission.READ_PHONE_STATE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="org.schabi.newpipe">
+		<permission name="android.permission.INTERNET"/>
+		<permission name="android.permission.WAKE_LOCK"/>
+		<permission name="android.permission.ACCESS_NETWORK_STATE"/>
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.SYSTEM_ALERT_WINDOW"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+    </privapp-permissions>
+
+	<privapp-permissions package="ws.xsoh.etar">
+		<permission name="android.permission.WRITE_EXTERNAL_STORAGE"/>
+		<permission name="android.permission.GET_ACCOUNTS"/>
+		<permission name="android.permission.VIBRATE"/>
+		<permission name="android.permission.READ_CONTACTS"/>
+		<permission name="android.permission.READ_CALENDAR"/>
+		<permission name="android.permission.WRITE_CALENDAR"/>
+		<permission name="android.permission.WAKE_LOCK"/>
+		<permission name="android.permission.READ_SYNC_SETTINGS"/>
+		<permission name="android.permission.FOREGROUND_SERVICE"/>
+    </privapp-permissions>
+
+</permissions>
diff --git a/permissions/permissions.mk b/permissions/permissions.mk
new file mode 100644
index 0000000..3ea19b4
--- /dev/null
+++ b/permissions/permissions.mk
@@ -0,0 +1,17 @@
+# Copyright (C) 2019-2021 BlissRoms Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+PRODUCT_COPY_FILES += \
+    vendor/foss/permissions/foss-permissions.xml:$(TARGET_COPY_OUT_SYSTEM)/etc/permissions/foss-permissions.xml